CVE-2026-14818Patch

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50(W) series firmware versions from V4.16 through V5.42 Patch 1, and USG20(W)-VPN series firmware versions from V4.16 through V5.42 Patch 1 could allow an authenticated attacker with administrator privileges to execute a crafted malicious configuration file on an affected device.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-path-traversal-vulnerability-in-the-configuration-file-execution-cli-command-of-zld-firewalls-08-04-2026

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-14818

Full discourse1 post

Vulmon Vulnerability Feed@VulmonFeeds91d
Patch
CVE-2026-14818 Path Traversal in Zyxel ATP and USG Series Firmware Versions Below 5.42 Patch 1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-14818
Post summary
A path‑traversal vulnerability (CVE‑2026‑14818) was disclosed in Zyxel ATP/USG firmware versions below 5.42 Patch 1, with the advisory referencing a patch to address the issue.
0000079
4.1K followersView on X

Explore more

Back to dashboard